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T p t.he Claims 

1. (currently amended) A method of securely connecting a 
plurality of client computers to computer resources in a 
shared computer system, comprising: 
5 associating each of said plurality of client 

computers with at least one virtual private network 
connection, wherein said plurality of client computers 
are remotely connected to at least one virtual private 
network termination device in said shared computer 
10 ° r ^", ^ared computer system comprising an 

» P pH nation .Prvice provider, and wherein said at least 
one virtual private network connection is established by 
said at least one virtual private network termination 
device; 

15 associating said at least one virtual private 

network connections with a plurality of virtual local 
area networks; and 

associating at least one of said computer resources 
in said shared computer system with each of said 

20 plurality of virtual local area networks , whqreby a 

rinmain fnr P^nh o f said plurality of client computers js 
extended rn includ e «*-iH computer resources jn said 
appl ication service prov ider and said plurality of client. 
^mpntsr domains are i s olated from each other wjthAh said 

25 applicat ion serv.i.cft provider. 

.2. (original) The method of claim 1, wherein each of said 
at least one virtual private network connections is uniquely 
associated with one of said plurality of virtual local area 
networks, so that a one to one correspondence exists between 
30 isaid at least one virtual private network connection and said 
plurality of virtual local area networks. 
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3. (original) The method of claim 1, wherein a plurality of 
said at least one virtual private network connections is 
uniquely associated with one of said plurality of virtual 
local area networks. 

5 4. (original) The method of claim 1, further comprising a 
configuration engine in said shared computer system 
configuring at least one virtual local area network switch to 
establish said plurality of virtual local area networks. 

5. (original) The method of claim 1, further comprising a 
10 configuration engine in said shared computer system 

configuring said at least one virtual private network 
termination device to establish said at least one virtual 
private network connection. 

•6.. (original) The method of claim 4, further comprising 
15 said configuration engine reading computer requirements from 
at least one client. 

7. (original) The method of claim 6, further comprising 
said configuration engine calculating an optimum allocation of 
said plurality of computer resources to meet said computer 

20 requirements of said at least one client. 

8. (original) The method of claim 4, further comprising 
said configuration engine configuring said at least one 
virtual local area network switch to connect at least two of 

' said plurality of client computers to a same one of said 
25 plurality of virtual local area networks. 

9. (original) The method of claim 1, wherein at least one 
• of said plurality of client computers is connected to said 



j 
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shared computer system across a dedicated line. 

10. (original) The method of claim 1, wherein at least one 
of said plurality of client computers is connected to said 
shared computer system across the Internet. 

5 11. (original) The method of claim 10, wherein at least one 
of said plurality of client computers is connected to said 
shared computer system with a modem. 

12. (original) The method of claim 10, wherein at least one 
of said plurality of client computers is connected to said 

10 shared computer system with a broadband connection. 

13. (original) The method of claim 1, said shared computer 
system further comprising computer readable program code for 
authenticating client computer identification, said method 
further comprising executing said computer readable program 

15 code to authenticate client computer identification before 

associating each of said plurality of client computers with at 
least one virtual private network connection. 

14. (original) The method of claim .1, said shared computer 
system further comprising at least one firewall, said method 

20 .further comprising configuring said at least one firewall to 
accept data from each of said plurality of client computers. 

15- (original) The method of claim 14, further comprising a 
configuration engine in said shared computer system 
configuring said at least one firewall to accept data from 
25 each of said plurality of client computers. 



4 



PAGE 7/15 * RCVD AT 8/16(2004 6:16:02 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/2 * DNIS:8729306 * CSID:303 297 22(6 * DURATION (mm-ss):04-26 



AUG-16-2004 16=21 



303 297 2266 



303 297 2266 P. 08 



Appl- No, 09/678,933 

16. (original) A secure computer system, comprising: 
a plurality of computer resources ; 
at least one virtual local area network switch 
electrically connected to said plurality of computer 

5 resources; 

at least one virtual private network termination 
device electrically connected to said at least one 
virtual local area network switch, wherein said at least 
one virtual local area network switch is configurable to 

10 changeably connect a plurality of virtual private network 

connections in said at least one virtual private network 
termination device to at least one of said plurality of 
computer resources while isolating said plurality of 
virtual private network connections from one another; and 

15 a configuration engine electrically connected to 

said at least one virtual local area network switch, said 
configuration engine comprising computer readable program 
code for configuring said at least one virtual local area 
network switch to changeably connect each of said 

20 plurality of virtual private network connections to at 

least one of said plurality of computer resources while 
isolating said plurality of virtual private network 
connections from one another. 

17. (original) The secure computer system of claim 16, 
25 wherein said computer readable program code in said 

configuration engine further comprises code for a graphical 
user interface to manually configure said virtual local area 
network switch. 

18. (original) The secure computer system of claim 16, 
30 wherein said computer readable program code in said 

configuration engine further comprises code for automatically 

5 
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configuring said virtual local area network switch. 

19. (original) The secure computer system of claim 16, 
wherein said computer readable program code in said 
configuration engine further comprises code for reading client 

5 computer requirements across said plurality of virtual private 
network connections. 

20. (original) The secure computer system of claim 16, 
further comprising at least one firewall connected to said 
plurality of virtual private network connections . 

10 21- (original) The secure computer system of claim 16, 
further comprising computer readable program code for 
authenticating identification of client computers connected to 
said plurality of virtual private network connections. 

22. (currently amended) A secure computer system, 
15 comprising: 

a plurality of computer resources within an 
application service p rovider; 

means for securely connecting each of a plurality of 
client computers to a portion of said plurality of 
20 computer resources in said applica tion service provider 

while isolating said portion of said plurality of 
computer resources from a second portion of said 
plurality of computer resources. 
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